Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xgnIH8XRGC4x6OjP-KRxUS04OyY.roa
File: xgnIH8XRGC4x6OjP-KRxUS04OyY.roa (raw, json)
Hash identifier: GPAnbHo7BEMEsz5Ln6Rp7RGZe5LtzjHY1F5H2BqRKd0=
Subject key identifier: C6:09:C8:1F:C5:D1:18:2E:31:E8:E8:CF:F8:A4:71:51:2D:38:3B:26
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01958117DF1D566C4292B0D14FF374D6C691
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xgnIH8XRGC4x6OjP-KRxUS04OyY.roa
Signing time: Mon 10 Mar 2025 17:26:19 +0000
ROA not before: Mon 10 Mar 2025 17:26:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.168.126.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.252.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:81:17:df:1d:56:6c:42:92:b0:d1:4f:f3:74:d6:c6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 10 17:26:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c609c81fc5d1182e31e8e8cff8a471512d383b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a8:a7:86:ab:58:93:dc:e8:f0:f5:b7:c4:b0:
02:2d:0b:35:f1:19:a4:45:ab:d1:8f:13:78:61:8b:
d1:9b:24:c9:4e:2e:3e:39:ab:7c:30:89:22:3c:e2:
ab:f1:c8:c0:41:fb:9b:b0:41:28:c0:b5:9b:da:b5:
4b:d3:42:50:d0:6e:75:ff:47:28:37:c9:33:ff:3e:
0e:a5:80:d9:6f:01:3e:57:db:92:fe:94:23:79:c7:
e0:c1:cc:42:27:23:9f:03:54:8d:a4:0e:47:27:b2:
a6:b7:47:af:23:c0:71:b5:a7:92:29:46:9f:59:b7:
fd:cc:93:0f:58:9c:79:09:58:aa:c7:1c:74:59:f2:
eb:cb:60:32:fc:79:10:b5:bc:3b:1d:11:a1:97:65:
d7:8a:d8:cc:f3:af:8e:90:f1:1c:36:85:ea:99:24:
2f:8f:d6:dc:fb:97:8f:f8:da:22:16:60:3f:22:59:
84:49:b1:79:8c:07:e7:6d:4e:f3:3c:ca:b1:0f:eb:
09:5b:64:b7:88:35:c4:a4:71:ab:3c:e5:57:7a:fe:
b9:49:9f:56:7a:d6:7b:d7:8d:bf:90:ae:6f:17:85:
fe:e0:78:ee:26:49:8c:b4:3d:74:1f:bd:3b:06:35:
7c:3f:b0:ba:85:6b:ff:42:4c:ee:2d:64:18:14:1f:
19:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:09:C8:1F:C5:D1:18:2E:31:E8:E8:CF:F8:A4:71:51:2D:38:3B:26
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xgnIH8XRGC4x6OjP-KRxUS04OyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.126.0/24
82.152.8.0/24
82.152.176.0/23
82.153.136.0/22
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
109.176.252.0/24
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.226.0/24
213.218.244.0/22
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
20:45:f7:90:8d:25:13:ef:01:fa:5f:22:46:fb:d4:47:ff:03:
ab:dc:8e:0b:7d:0d:9b:cd:77:ba:42:20:9d:6c:82:4d:27:de:
39:70:c6:6f:c0:94:4c:bf:cf:08:cb:91:01:e1:ae:91:54:6e:
1c:1b:8d:83:1b:ca:43:a2:12:36:d3:d1:0f:38:94:2e:dc:fc:
13:4d:b3:68:f9:40:01:79:52:f7:21:26:47:66:8c:e7:ea:96:
ae:b8:99:5c:cd:7c:12:80:ed:44:38:b5:e9:98:5a:79:ff:49:
b5:c0:7b:2e:89:b4:ed:06:39:d7:1e:19:d4:07:29:0d:76:33:
28:0c:92:49:4b:c3:7d:df:bf:33:01:fa:ff:65:e5:ee:c8:46:
90:f9:58:80:74:b9:08:44:15:c9:d3:a3:a6:7c:2f:fb:ca:85:
ee:ae:31:1f:ae:d7:81:9d:d0:d4:15:99:d4:0f:2f:ed:21:96:
21:2b:c5:3c:c3:98:f0:8d:cf:0b:7a:61:5b:e2:96:04:b5:15:
1b:03:a9:77:c8:db:48:c4:c4:1d:6b:84:43:99:f9:eb:06:b2:
ca:c7:6d:a5:ab:28:8a:e9:2b:7e:a1:62:ff:8a:bf:c2:c2:ec:
37:61:ae:4e:8f:41:e4:94:5d:bd:f4:0b:a3:e5:5c:9a:2c:e9:
c9:f2:38:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:36:44 2025 by rpki-client